Overview
Features
Deployment
Downloads

Advanced network packet broker appliance for high-density, high-throughput network monitoring, packet management, and tunnel decapsulation

Advanced Network Packet Optimization Appliance

The Ixia xFilter™ provides advanced packet brokering, grooming, and optimization capabilities, including packet management, filtering, tunnel decapsulation, and network management. This advanced appliance allows IT managers to offload the burden of compute-intensive functions from monitoring and security tools. The effectiveness of these tools could otherwise be severely impaired by diverting of bandwidth and CPU resources away from their primary functions of security and performance monitoring. As the first solution on the market to perform these vital functions in a single device, the Ixia xFilter significantly improves the efficiency, performance, and effectiveness of the entire network and its security monitoring infrastructure.

Available as a physical or virtual appliance, the xFilter offers deployment flexibility for operating in today’s dynamic network environments and all areas of the converged data center. The physical appliance delivers high throughput port density (up to 12 10G ports), while the virtual appliance is the only on-demand solution of its kind that can be deployed and configured with a few simple mouse clicks.

Further Optimization When Integrated with Network Access and Management Solutions

Switches belonging to the Ixia Director™ family – including the Ixia Director xStream™ data monitoring switch, and the Ixia xBalancer™ load balancing solution – are optional components. These solutions augment and complement the xFilter’s capabilities. Integrating easily with the xFilter, the Ixia Director family aggregates raw traffic from multiple xFilter devices and switches it quickly and seamlessly to the network’s instrumentation layer tools, which then carry out their respective inspection and monitoring processes. Load-balancing capabilities allow 10GB network sources to be redistributed out to 1GB tools (or vice versa). This capability is particularly useful for supporting converged data centers and addressing hybrid physical, virtual, and cloud-based network topologies. xFilter can also serve as an end point for traffic being extracted from virtual switches by the Ixia Phantom VTap.

xFilter Core Capabilities

High-Throughput Decapsulation

The Ixia xFilter strips the headers from tunneled traffic coming from any tap or other source, thus enabling unobstructed visibility. It then decapsulates this traffic and reassembles fragmented packets for auditing and inspection in their raw form.

Packet Forwarding

After decapsulation, and header removal, the xFilter forwards packets to an egress port (and optionally a VLAN), as determined by the forwarding rules.

Versatile Multi-Protocol Packet Brokering and Manipulation

  • MPLS stripping with packet forwarding: strips and removes MPLS headers as well as supports removal of 2, 4, and 6 stacked labels.
  • VN-Tag stripping with Packet Forwarding: can be configured to remove VN-Tag headers from captured packets.
  • VN-Tag mapping: maps virtual interface IDs of VN-Tag headers into VLAN IDs.
  • Cisco FabricPath header stripping: decapsulates and strips Cisco FabricPath headers.
  • VLAN tagging: enables streamlining of packets moving between switches by inserting a packet header to identify the packet’s VLAN destination.
  • Packet filtering: tightly controls access by analyzing packets and allowing them to pass or not, based on defined criteria.
  • BGP-based IP filters: eliminates device-peering with BGP routers to simplify function and raise performance.
  • Support for up to 5000 egress filters: offers unprecedented flexibility.
  • GRE stripping: removes and strips outer IP and GRE headers.

  • Serves as physical or virtual appliance to be deployed in all areas of the converged data center
  • Supports high-throughput monitoring of all traffic
  • Delivers overall capacity of up to 120 Gbps in 1U rack-mount appliance
  • Decapsulates tunneled traffic at 10 Gbps per physical port
  • Makes possible up to 12 network plus 12 monitor connections with simplex cables (RX fiber for network, TX for tool)
  • Seamlessly integrates with Ixia Phantom VTap
  • Handles fragmentation and defragmentation of packets
  • Designed to fully complement Ixia Phantom VTap GRE and ER-SPAN tunneling
  • Easily integrates with Ixia Director, Ixia Director xStream and Ixia xBalancer
  • Optimized for use with all Ixia Net Optics taps
  • Improves network visibility and security
  • Maximizes threat management in monitored environments
  • Reduces packet payload overhead before it reaches instrumentation layer tools

Deployment Ixia xFilter

 

You need more Information